AMENDMENTS TO THE SPECIFICATION 



Please amend the specification as indicated below. The language being added is 
underlined (" ") and the language being deleted contains a strikethrough (" — "). 



Abstract: 



A method and system is provided for generating pseudo-random 
numbers utilizing techniques of both the SHA-1 and DES encryption standards, 
wherein a pseudo-random number generator is re-keyed periodically using an 
external input of physical randomness. In accordance with one embodiment of 
the present invention, a current seed value Sj is loaded from a non-volatile 
storage. Next, values E, representative of environmental randomness, and C, 
representative of configuration data are likewise loaded. A new seed value, Sj+i, 
is generated in accordance with the equation Sj+i=f (Sj; A; C; E), wherein f 
represents a selected encryption algorithm, and AB is a firs tsecond constant, 
and wherein Sj is concatenated with A, which is concatenated with C which is 
concatenated with E. The new seed is then written to the non-volatile storage. 
Next, a key, K, is generated in accordance with the equation K=f (Sj; B; C; E), 
wherein B is a second constant. Lastly, a pseudo-random number output, P n , is 
generated in accordance with the equation P n =f3DEs(K, P n .i), where f 3D ES 
represents the operation of triple DES encryption hardware, and P„-i is the 
previously generated pseudo-random number. 



2 



Paragraph [0008]: 



[0008] In accordance with one embodiment of the present invention a current seed value Sj is 
loaded from a non-volatile storage. Next, values E, representative of environmental 
randomness, and C, representative of configuration data are likewise loaded. A new seed 
value, Sj+i, is generated in accordance with the equation Sj+i=f (Sj; A; C; E), wherein f 
represents a selected encryption algorithm, and AB is a first second constant, and wherein 
Sj is concatenated with A, which is concatenated with C which is concatenated with E. 
The new seed is then written to the non-volatile storage. Next, a key, K, is generated in 
accordance with the equation K=f (Sj; B; C; E), wherein B is a second constant. A 
pseudo-random number output, P„, is then generated in accordance with the equation 
Pn^fsDEsO^, P n _i), where f 3D ES represents the operation of triple DES encryption hardware, 
and P n _i is the previously generated pseudo-random number. 
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Paragraph [0013]: 



[0013] Where, the initial value P 0 can be set to any fixed value such as 0. This will 
provide a source of pseudorandom numbers with a rate of about 15 Mbit/sec. 
The key K will be derived from a seed S kept externally in non-volatile 
memory. Initially, on power-up, the device loads the current value Sj of the 
seed, plus configuration data C and environmental randomness E in step 100. 
The device will compute the key K in step 1044Q2 and the next value Sj+i of the 
seed in step 102404 as follows, using, in one embodiment, the FIPS 180 secure 
hash standard algorithm (SHA). The seed Sj will preferably be 160 bits in 
length if the current secure hash standard algorithm SHA-1 is used, and 256 bits 
if the proposed new standard SHA-256 algorithm is used: 
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